TMA-DB2-6.2.6
Review Role Grantees with WITH ADMIN OPTION
Deskripsi
Using the WITH ADMIN OPTION clause of the GRANT (Role) SQL statement, the security administrator can delegate the management and control of membership in a role to someone else.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => select rolename, grantee, admin from syscat.roleauth where grantortype <> 'S' and admin = 'Y' If the value returned is blank, that is considered a Pass.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
1. Connect to Db2 database: db2 => connect to <dbname> 2. Perform the following query: db2 => revoke admin option for role <role name> from user <user name>
Properti
- Sistem operasi
- Apa saja
- Tag
- db2databasemanual
- Referensi
- CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.2.6 Review Role Grantees with WITH ADMIN OPTION